$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer File: 3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.cer (raw, json) Hash identifier: z7d7cY6rtT5TS1wqkIFLP7L8r8hGZdA57MOgeS9oWJk= Subject key identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 Authority key identifier: 14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 Certificate issuer: /CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Certificate serial: 14AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer Manifest: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft caRepository: rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ Notify URL: https://rrdp.twnic.tw/rrdp/notify.xml Certificate not before: Fri 22 Mar 2024 08:56:07 +0000 Certificate not after: Fri 21 Feb 2025 15:30:22 +0000 Subordinate resources: IP: 157.20.68.0/23 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 05:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5290 (0x14aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDB290000/serialNumber=1431392F2FA6D18F66741E2EA1AEEA1781861743 Validity Not Before: Mar 22 08:56:07 2024 GMT Not After : Feb 21 15:30:22 2025 GMT Subject: CN=DE872BAD262D18F0A6749E0272D975261D949EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:cf:e5:2e:90:f7:a1:8f:b4:6f:5e:2d:6b: eb:65:7b:bd:e4:2d:f3:ee:cc:80:eb:9a:ef:2d:e5: 40:1f:2b:b0:32:ca:d7:4d:71:dc:03:f6:c3:43:25: f4:da:06:ad:eb:46:c4:78:94:0c:8a:c7:41:c2:f7: a1:8b:7e:26:4e:14:cb:80:8c:36:30:24:f3:dc:f2: 1e:3d:9b:66:e6:26:c6:2f:56:cf:0a:8d:4d:ed:1c: 6e:66:07:24:89:7f:6f:23:21:9d:a2:39:2a:bd:53: 43:25:db:0d:54:1a:ac:82:72:dc:1a:4a:49:e9:81: dd:4a:c3:4b:46:af:71:d3:54:23:c6:08:3e:1c:ff: dc:90:17:72:9c:46:99:3f:71:1e:87:28:c4:ea:00: 12:4d:75:ae:57:ea:e7:25:bc:6a:03:3b:f6:75:e5: be:21:c8:36:b0:a8:b0:49:95:26:9d:fc:fe:96:d1: e6:b2:14:d6:70:e6:2a:28:e5:2d:48:e4:65:87:23: 7e:6f:60:53:70:68:23:62:16:11:89:47:a5:59:63: a7:68:1e:4d:3b:78:af:41:a0:f7:98:6c:94:5d:2c: 09:0b:ae:09:57:fd:41:e9:11:ec:c1:10:58:06:3f: 57:5d:02:64:dc:d9:dd:d7:d0:d8:c7:d9:b5:82:0e: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:2B:AD:26:2D:18:F0:A6:74:9E:02:72:D9:75:26:1D:94:9E:C3 X509v3 Authority Key Identifier: keyid:14:31:39:2F:2F:A6:D1:8F:66:74:1E:2E:A1:AE:EA:17:81:86:17:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FDE5Ly-m0Y9mdB4uoa7qF4GGF0M.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/ RPKI Manifest - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FUYU/3ocrrSYtGPCmdJ4Cctl1Jh2UnsM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 157.20.68.0/23 Signature Algorithm: sha256WithRSAEncryption 51:78:89:3e:e9:04:c7:9b:9d:b7:e9:a8:d4:8a:f2:f6:fd:a6: 8e:59:b6:5f:2c:08:3d:7e:16:4c:a6:8d:0f:f8:7d:63:ab:4d: eb:1b:24:1c:d9:b1:2c:d1:00:fe:f8:75:64:ed:f0:72:c3:43: 5b:0c:2b:d9:82:44:6d:2e:fc:cf:2c:20:56:64:08:ec:77:f0: b4:9b:64:d0:9a:ed:e0:4d:c4:6b:90:f0:6a:94:02:c5:17:eb: 91:ed:9d:ef:d2:57:a1:7d:fd:00:c9:16:bf:2d:26:de:b8:43: 74:36:91:1b:6a:fd:86:a3:e4:29:fa:e2:3b:7e:38:5e:31:67: ab:2d:73:24:4e:8b:b0:bb:17:bb:00:7d:4b:50:26:0a:d8:9c: af:e4:f9:2f:66:d0:13:c9:6e:93:91:cd:d6:b2:84:71:9b:69: 66:4b:65:fc:b6:6e:e8:69:f1:cb:dc:f6:20:6e:0b:53:3b:6f: 13:4d:9b:57:4d:fb:71:37:8b:65:f7:9f:26:b5:68:da:b9:bc: 23:e3:d1:94:46:ee:c6:4b:ba:12:57:3b:33:92:60:86:06:38: e1:17:f5:67:c5:4d:65:d0:db:4e:c1:3f:bd:f7:55:44:f8:88: f3:44:33:66:d7:b6:49:17:76:c4:e6:76:d5:11:21:e4:53:16: 16:b9:52:51 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICFKowDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QkRCMjkwMDAwMTEwLwYDVQQFEygxNDMxMzkyRjJGQTZEMThGNjY3NDFFMkVBMUFF RUExNzgxODYxNzQzMB4XDTI0MDMyMjA4NTYwN1oXDTI1MDIyMTE1MzAyMlowMzEx MC8GA1UEAxMoREU4NzJCQUQyNjJEMThGMEE2NzQ5RTAyNzJEOTc1MjYxRDk0OUVD MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuQz+UukPehj7RvXi1r 62V7veQt8+7MgOua7y3lQB8rsDLK101x3AP2w0Ml9NoGretGxHiUDIrHQcL3oYt+ Jk4Uy4CMNjAk89zyHj2bZuYmxi9WzwqNTe0cbmYHJIl/byMhnaI5Kr1TQyXbDVQa rIJy3BpKSemB3UrDS0avcdNUI8YIPhz/3JAXcpxGmT9xHocoxOoAEk11rlfq5yW8 agM79nXlviHINrCosEmVJp38/pbR5rIU1nDmKijlLUjkZYcjfm9gU3BoI2IWEYlH pVljp2geTTt4r0Gg95hslF0sCQuuCVf9QekR7MEQWAY/V10CZNzZ3dfQ2MfZtYIO FbkCAwEAAaOCAkwwggJIMB0GA1UdDgQWBBTehyutJi0Y8KZ0ngJy2XUmHZSewzAf BgNVHSMEGDAWgBQUMTkvL6bRj2Z0Hi6hruoXgYYXQzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMFUGA1UdHwROMEwwSqBIoEaGRHJzeW5jOi8vcnBraWNhLnR3bmlj LnR3L3Jwa2kvVFdOSUNDQS9GREU1THktbTBZOW1kQjR1b2E3cUY0R0dGME0uY3Js MH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmlj Lm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYy L0ZERTVMeS1tMFk5bWRCNHVvYTdxRjRHR0YwTS5jZXIwDwYDVR0TAQH/BAUwAwEB /zAOBgNVHQ8BAf8EBAMCAQYwgdIGCCsGAQUFBwELBIHFMIHCMDYGCCsGAQUFBzAF hipyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRlVZVS8wVQYI KwYBBQUHMAqGSXJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9G VVlVLzNvY3JyU1l0R1BDbWRKNENjdGwxSmgyVW5zTS5tZnQwMQYIKwYBBQUHMA2G JWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGdFEQwDQYJKoZIhvcNAQELBQADggEBAFF4iT7p BMebnbfpqNSK8vb9po5Ztl8sCD1+FkymjQ/4fWOrTesbJBzZsSzRAP74dWTt8HLD Q1sMK9mCRG0u/M8sIFZkCOx38LSbZNCa7eBNxGuQ8GqUAsUX65Htne/SV6F9/QDJ Fr8tJt64Q3Q2kRtq/Yaj5Cn64jt+OF4xZ6stcyROi7C7F7sAfUtQJgrYnK/k+S9m 0BPJbpORzdayhHGbaWZLZfy2buhp8cvc9iBuC1M7bxNNm1dN+3E3i2X3nya1aNq5 vCPj0ZRG7sZLuhJXOzOSYIYGOOEX9WfFTWXQ207BP733VUT4iPNEM2bXtkkXdsTm dtURIeRTFha5UlE= -----END CERTIFICATE-----Generated at Tue May 21 23:30:59 2024 by rpki-client on console-ams.rpki-client.org